$ rpki-client -vvf rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft File: L-xEr8Mx34paY6L1hB6AnZey99A.mft (raw, json) Hash identifier: e1pMZj2VS8aSZ/UK9gfe1fueYj+hyJC4yeHcXKx5+1E= Subject key identifier: 7B:48:63:EB:36:49:9B:6C:4D:2A:4B:66:4E:6D:D4:F0:C9:C1:F5:51 Authority key identifier: 2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 Certificate issuer: /CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Certificate serial: 33C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft Manifest number: 33C3 Signing time: Sat 18 May 2024 15:12:55 +0000 Manifest this update: Sat 18 May 2024 15:12:55 +0000 Manifest next update: Sat 25 May 2024 15:12:55 +0000 Files and hashes: 1: L-xEr8Mx34paY6L1hB6AnZey99A.crl (hash: omw6YJ7+IeI882NMeIoHeFMBT16XNImrnGSgzz1aZlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13251 (0x33c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Validity Not Before: May 18 15:12:55 2024 GMT Not After : May 25 15:12:55 2024 GMT Subject: CN=6648c577-e056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:08:f5:bc:91:ab:6f:87:5e:21:ee:6a:c6:39: a2:75:91:24:dd:1e:59:0c:f1:0c:cb:45:0c:c6:ff: ff:df:0f:2c:44:64:65:5c:e6:cd:71:fd:75:2b:65: 8f:c4:95:58:26:d1:b5:b0:f7:a6:10:a3:78:3b:0b: 44:fc:47:a4:e6:4b:85:18:1b:82:07:b0:e5:b2:1e: 22:cb:b1:b9:67:70:69:bd:2c:bd:b1:a7:05:54:e5: 45:b1:cf:ee:b7:9a:8a:a0:f5:45:e0:b2:03:36:c3: 95:26:a2:26:bb:fe:0c:e2:7e:2f:49:ec:6e:81:22: 6c:1a:ec:41:88:36:d5:66:a8:67:87:6e:ef:11:2b: 9e:8c:d6:d2:38:6a:77:cc:fb:4e:65:60:0c:16:b4: ab:d8:d3:f6:98:e1:b0:a3:75:c8:4a:40:31:00:e8: 5f:91:4a:ec:8e:89:c1:b8:99:a5:f2:ea:45:53:8e: 89:c3:b9:9c:81:e5:eb:d1:b3:86:50:c1:82:b0:94: f7:54:1d:7d:2d:b3:5d:c7:1f:60:49:a3:09:ba:56: 4c:65:84:eb:0f:e2:c2:59:1d:9d:bb:9e:2e:e2:04: 92:27:1b:57:54:2e:2e:d4:28:7d:c2:21:41:32:a0: 17:5e:8c:e1:8e:0d:a3:41:e7:ad:ad:93:ee:04:61: c3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:48:63:EB:36:49:9B:6C:4D:2A:4B:66:4E:6D:D4:F0:C9:C1:F5:51 X509v3 Authority Key Identifier: keyid:2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c7:02:82:ed:7e:ba:49:c2:5e:6b:64:fe:8a:03:18:95:99: 66:d6:c0:8f:e2:39:5e:4a:a4:23:22:9c:2a:b9:6b:25:80:13: 27:63:08:bc:b2:af:6d:58:e8:fd:e0:7d:08:9a:2a:33:52:ea: 29:3f:60:74:2b:81:96:7f:27:ae:c6:58:5c:34:4f:f4:1b:a0: 27:55:ab:4b:8d:ec:72:78:ad:ec:43:45:2c:29:87:ce:f6:1e: 41:81:24:80:25:58:a4:d5:2f:11:be:48:86:a8:94:19:79:a0: 06:51:51:35:db:8e:2a:98:99:b3:06:f9:f6:d4:be:bb:54:0f: 03:c2:41:43:c8:d6:8f:74:e5:66:4f:1d:64:51:a0:84:69:4e: 34:c5:4b:e0:77:1e:59:ed:8f:74:4c:cd:88:72:ae:36:c4:ac: af:42:bf:f5:66:77:aa:fd:5d:b1:7f:04:49:2c:5b:96:9e:66: 88:e8:cd:d4:12:39:0c:76:9a:20:5d:56:fc:ac:e9:8d:a3:4f: 3a:ee:91:44:f2:0f:84:ce:da:a6:72:4d:50:77:84:98:c2:42: 14:d9:0e:f5:bf:42:f5:2a:68:29:05:6b:58:bc:af:8d:4c:e3: 7a:fc:f2:93:55:2a:9b:6e:54:76:57:61:7f:c0:42:0f:79:df: 6e:6c:8b:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRTIxMTAvBgNVBAUTKDJGRUM0NEFGQzMzMURGOEE1QTYzQTJGNTg0MUU4MDlE OTdCMkY3RDAwHhcNMjQwNTE4MTUxMjU1WhcNMjQwNTI1MTUxMjU1WjAYMRYwFAYD VQQDEw02NjQ4YzU3Ny1lMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Qj1vJGrb4deIe5qxjmidZEk3R5ZDPEMy0UMxv//3w8sRGRlXObNcf11K2WP xJVYJtG1sPemEKN4OwtE/Eek5kuFGBuCB7Dlsh4iy7G5Z3BpvSy9sacFVOVFsc/u t5qKoPVF4LIDNsOVJqImu/4M4n4vSexugSJsGuxBiDbVZqhnh27vESuejNbSOGp3 zPtOZWAMFrSr2NP2mOGwo3XISkAxAOhfkUrsjonBuJml8upFU46Jw7mcgeXr0bOG UMGCsJT3VB19LbNdxx9gSaMJulZMZYTrD+LCWR2du54u4gSSJxtXVC4u1Ch9wiFB MqAXXozhjg2jQeetrZPuBGHDsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtIY+s2 SZtsTSpLZk5t1PDJwfVRMB8GA1UdIwQYMBaAFC/sRK/DMd+KWmOi9YQegJ2XsvfQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVFMi80MjBGNjMwQTFE OUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0cGFZNkwxaEI2QW5aZXk5 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wteEVyOE14MzRwYVk2TDFoQjZBblpleTk5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVFMi80MjBGNjMwQTFEOUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0 cGFZNkwxaEI2QW5aZXk5OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBixwKC7X66ScJea2T+igMYlZlm1sCP4jleSqQjIpwquWslgBMnYwi8 sq9tWOj94H0ImiozUuopP2B0K4GWfyeuxlhcNE/0G6AnVatLjexyeK3sQ0UsKYfO 9h5BgSSAJVik1S8RvkiGqJQZeaAGUVE1244qmJmzBvn21L67VA8DwkFDyNaPdOVm Tx1kUaCEaU40xUvgdx5Z7Y90TM2Icq42xKyvQr/1Zneq/V2xfwRJLFuWnmaI6M3U EjkMdpogXVb8rOmNo0867pFE8g+Eztqmck1Qd4SYwkIU2Q71v0L1KmgpBWtYvK+N TON6/PKTVSqbblR2V2F/wEIPed9ubItN -----END CERTIFICATE-----Generated at Sat May 18 15:58:20 2024 by rpki-client on console-ams.rpki-client.org